Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

DDI Central 6.3: Now with Windows Node Agent for agent-based server communication

DDI Central 6.2 introduced GSS-TSIG authentication for secure dynamic DNS updates, JIT user provisioning via LDAP and LDAPS, and native scavenging support for Windows AD-integrated and DDNS domains, giving network admins greater control over DNS updates, domain hygiene, and user access across their infrastructure. These new additions have addressed major pain points on how admins manage DNS security, authentication, and resources.

Zero Trust for AI Agents Starts After Login

Zero Trust was built to fix an older assumption: if you were inside the network, you were trusted. Then, Cloud, SaaS and remote work broke that, so security moved toward identity, device checks, MFA, least privilege, and continuous verification. But now, with agents, the messy bit starts after access. The agent reads a prompt, pulls context, chooses a tool, calls an API, and may trigger a workflow. The login tells you the agent is “trusted”.

Identifying and detecting ScoutC2 malware

At Corelight Labs, our mission is to help organizations stay a step ahead of evolving threats. When our researchers came across Censys' detailed write-up on ScoutC2, a rapidly growing open-source command-and-control (C2) framework favored by threat actors, we knew we needed to bolster community defenses quickly.

Network Security Policy Management: Dynamic Object Tracking Explained #shorts

Network security policy management systems must accurately track dynamic IP address changes within tags to correctly answer traffic simulation queries. This ensures policy compliance even as cloud environments scale elastically, preventing redundant audit alerts.

Stop Chasing Alerts, Start Hunting Adversaries: The New NDR Essentials

It was time to write another book. That’s what I thought when I heard that Corelight wanted to update its 2021 book on network detection and response (NDR). Tamara Crawford, who owned the project, scheduled a meeting with me and asked if I might be interested in helping, depending on who might write the text.

Top tips: How to use public Wi-Fi without handing your data to a stranger

Top tips is a weekly column where we highlight what's trending in the tech world and list practical ways to explore these trends. This week, we are tackling something almost everyone does without thinking twice: connecting to public Wi-Fi (and what it could be costing you without you ever knowing). You are at an airport, a coffee shop, or a hotel lobby. You notice your data plan is running low and scroll through the available networks. And there it is: Free Wi-Fi—no password required.

10 best network device management software

Network outages are still painfully expensive, and configuration mistakes are one of the biggest culprits. A 2023 analysis of Uptime Institute data shows that configuration and change management failures are the top cause of major network outages, responsible for around 45% of network incidents. Even a small configuration slip on a core switch can cascade into large-scale downtime. That’s why consistent, well-governed network device management is key to keeping business services uninterrupted.

Episode 18 - Live Fire Defense at Locked Shields

In this episode, host Richard Bejtlich sits down with Corelight Senior Sales Engineers Adam Donadeo and Nico Roosenboom to unpack their firsthand experiences at Locked Shields, the world’s largest international live-fire cyber defense exercise. The conversation dives deep into the chaotic, real-world friction of defending a massive virtualized network alongside 4,000 global experts against aggressive red team waves.